Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
File: 8ABC3240DDFB03E0CCAA63975F272973E713952B.mft (raw, json)
Hash identifier: Gqky6SH+rKIIGaWYgPj+KpNgVMefr1CJKHIu9I047Zk=
Subject key identifier: 77:A7:B3:DD:40:91:5B:34:5F:32:C2:39:4D:B3:68:E2:9C:98:BC:45
Authority key identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B
Certificate issuer: /CN=8abc3240ddfb03e0ccaa63975f272973e713952b
Certificate serial: 1FF1776E8C5DA03378117E766AB8E2146A3F12A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
Manifest number: 74
Signing time: Thu 26 Mar 2026 02:09:30 +0000
Manifest this update: Thu 26 Mar 2026 02:04:30 +0000
Manifest next update: Fri 27 Mar 2026 04:12:30 +0000
Files and hashes: 1: AS214223.asa (hash: 7UegyXDHhe1XI9lGimc4evL2pldMV+cdrQzvvjsht9k=)
2: 8ABC3240DDFB03E0CCAA63975F272973E713952B.crl (hash: sk1CtpwdHq71AWXWNGqaRcceBwId5QurzhXiMKLvetw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl
rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f1:77:6e:8c:5d:a0:33:78:11:7e:76:6a:b8:e2:14:6a:3f:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abc3240ddfb03e0ccaa63975f272973e713952b
Validity
Not Before: Mar 26 02:04:30 2026 GMT
Not After : Mar 27 04:12:30 2026 GMT
Subject: CN=77A7B3DD40915B345F32C2394DB368E29C98BC45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:ec:2c:c8:ad:6e:50:9d:36:cb:40:27:fc:
5f:be:8b:9b:ff:e3:59:86:b3:f1:c0:9a:f6:d5:d5:
fb:4a:3a:95:7b:2c:be:a8:bf:e9:70:61:fb:9f:2c:
77:33:86:fd:bf:f6:fa:0d:5b:43:16:2b:c4:b9:6c:
e3:34:14:49:8d:4d:80:2b:96:f2:b4:97:64:9c:73:
7b:8d:3e:26:63:fe:e7:53:d1:e7:51:ad:00:1f:c7:
17:8e:fc:6c:55:d9:13:bb:27:70:86:ad:91:95:38:
02:14:a0:64:50:e7:5d:67:e3:2b:9b:41:be:54:d8:
2e:82:2c:6e:a9:f5:fa:87:c9:86:a2:76:44:c1:77:
89:ba:93:ad:d4:fc:8f:58:5e:cb:5b:ae:f5:42:d2:
d5:ad:c3:ae:46:e1:31:09:6e:dc:bc:16:77:8e:21:
04:ae:81:93:28:f9:93:d9:67:34:01:0a:b0:19:b8:
18:7b:59:e6:d5:fa:c8:55:4e:9d:a4:79:4c:b6:f6:
32:d0:64:76:ab:5b:ac:4f:a4:a7:72:48:72:d0:e9:
74:b0:de:67:69:74:b3:0a:4a:fe:62:d1:b0:e5:04:
17:f1:15:7b:e4:ce:95:74:67:9f:3c:e1:f7:fc:d3:
64:6c:4b:62:e4:83:80:cc:f4:67:7a:de:f1:47:47:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:B3:DD:40:91:5B:34:5F:32:C2:39:4D:B3:68:E2:9C:98:BC:45
X509v3 Authority Key Identifier:
keyid:8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:47:57:70:29:7a:96:9a:2f:c1:a0:58:b4:31:45:03:24:f6:
01:ff:8a:f8:e3:3a:b5:dc:f7:10:72:7c:4a:73:12:76:ad:cb:
a1:f3:69:cb:b1:39:b2:9a:c4:ca:35:01:c3:f3:26:e5:bf:1a:
20:b9:74:39:03:7c:08:a4:ea:43:75:78:4b:22:a9:1c:7d:b8:
28:90:9c:b9:40:a7:a2:ae:7b:30:2e:24:e4:c6:cc:fe:8b:da:
f0:7d:8a:7a:63:11:b0:31:d8:93:66:c4:69:77:dc:be:c9:3c:
8c:e4:62:26:43:0b:36:3e:26:30:e3:64:95:1e:31:2b:65:76:
fa:91:c3:be:24:1c:41:14:b3:75:3f:b0:1b:99:c2:6f:79:b7:
58:6d:d1:ba:a9:89:f2:33:12:f0:fa:7a:0e:c6:04:fa:ac:2c:
85:9b:36:f7:75:68:dc:18:df:82:ac:58:64:0d:3a:6a:6b:f6:
bc:39:f5:a9:12:bb:cc:da:01:46:d4:08:5a:84:8d:5e:c3:7e:
5c:43:c7:6a:e2:a8:f8:a8:93:36:ab:75:65:af:d3:1d:71:96:
2d:30:7c:4a:f8:a0:5d:ec:c7:66:2c:3f:63:52:4e:27:aa:90:
0c:27:ad:84:6c:d9:1d:77:00:fc:9f:54:9d:2a:bb:9e:77:c9:
2e:04:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:58 2026 by rpki-client